syzbot


general protection fault in SyS_bpf

Status: fixed on 2017/10/24 06:54
Fix commit: ae2b27b859a1 bpf: fix a return in sockmap_get_from_fd()
First crash: 2443d, last: 2435d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream general protection fault in SyS_bpf (2) bpf C 1065 2250d 2265d 4/26 fixed on 2018/02/26 20:04

Sample crash report:
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 20260 Comm: syzkaller057706 Not tainted 4.13.0-rc6+ #23
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801d3a3e380 task.stack: ffff8801c99c8000
RIP: 0010:find_and_alloc_map kernel/bpf/syscall.c:103 [inline]
RIP: 0010:map_create kernel/bpf/syscall.c:330 [inline]
RIP: 0010:SYSC_bpf kernel/bpf/syscall.c:1478 [inline]
RIP: 0010:SyS_bpf+0xd18/0x5160 kernel/bpf/syscall.c:1459
RSP: 0018:ffff8801c99cf7c8 EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 000000000000000f RCX: 0000000000000000
RDX: 0000000000000006 RSI: 0000000000000001 RDI: ffffffff84ee4498
RBP: ffff8801c99cff48 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff10039339f00
R13: ffffffff84eeb160 R14: 0000000000000000 R15: 00000000203c0fec
FS:  00007f47038ac700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff3b7dde2c CR3: 00000001d1fb9000 CR4: 00000000001406e0
Call Trace:
 entry_SYSCALL_64_fastpath+0x1f/0xbe
RIP: 0033:0x4461e9
RSP: 002b:00007f47038abdc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004461e9
RDX: 0000000000000014 RSI: 00000000203c0fec RDI: 0000000000000000
RBP: 0000000000000086 R08: 00007f47038ac700 R09: 00007f47038ac700
R10: 00007f47038ac700 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff3b7ddd9f R14: 00007f47038ac9c0 R15: 0000000000000000
Code: 00 0f 85 d4 43 00 00 49 8d 46 30 4e 8b 2c ed 20 44 ee 84 48 89 c2 48 89 85 b0 f8 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 95 43 00 00 49 8d 7e 04 48 b8 00 00 00 00 00 
RIP: find_and_alloc_map kernel/bpf/syscall.c:103 [inline] RSP: ffff8801c99cf7c8
RIP: map_create kernel/bpf/syscall.c:330 [inline] RSP: ffff8801c99cf7c8
RIP: SYSC_bpf kernel/bpf/syscall.c:1478 [inline] RSP: ffff8801c99cf7c8
RIP: SyS_bpf+0xd18/0x5160 kernel/bpf/syscall.c:1459 RSP: ffff8801c99cf7c8
---[ end trace 6a951a1d60b86712 ]---
Kernel panic - not syncing: Fatal exception
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2017/08/25 16:54 net-next-old 3fd871270732 c3631fc7 .config console log report syz C ci-upstream-net-kasan-gce
2017/08/25 08:07 linux-next 9506597de2cd 3f1aca48 .config console log report syz C ci-upstream-next-kasan-gce
2017/08/25 06:46 net-next-old 39a7e5892418 3f1aca48 .config console log report syz ci-upstream-net-kasan-gce
2017/08/25 16:10 linux-next 7159188b70e3 4074aed7 .config console log report syz ci-upstream-next-kasan-gce
2017/08/25 15:50 linux-next 7159188b70e3 4074aed7 .config console log report syz ci-upstream-next-kasan-gce
2017/08/25 08:00 linux-next 9506597de2cd 3f1aca48 .config console log report syz ci-upstream-next-kasan-gce
2017/08/26 03:49 net-next-old ec15ecdee5eb 4074aed7 .config console log report ci-upstream-net-kasan-gce
2017/08/25 06:31 net-next-old 39a7e5892418 3f1aca48 .config console log report ci-upstream-net-kasan-gce
2017/08/23 10:51 net-next-old e3d0328c76dd f238fbd4 .config console log report ci-upstream-net-kasan-gce
2017/08/17 20:48 net-next-old f03b488b2fb1 2dfba870 .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.